6afaa0669c83f877de786ba2e8f80556498458a9f65c79f0645644426eff3449

Sharing

Copy URL Twitter E-mail

General

Target
6afaa0669c83f877de786ba2e8f80556498458a9f65c79f0645644426eff3449
Size 196KB
Sample221019-t78c5agecl
SHA256 6afaa0669c83f877de786ba2e8f80556498458a9f65c79f0645644426eff3449
MD5 a0b41fe9122e25ce489d16bd93a58850
SHA1 7adb850f9d258fd0161e991fdf3396047250bb95
SHA512 6297ee58455261064409dd78be3a0d0fbfc7a5e99cb08cb74713dd4397cf9bbcc6517981ee4d749cd1f0991c489f7b32868ff31b58386c37ed51da4ccc42da8b
SSDEEP 3072:aM65zTN7RH9AvfrF3fpp0dL5qxpubZyejITv9fXFg1:1mTNJ0frF3Bp0dLiobP+v9fVa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6afaa0669c83f877de786ba2e8f80556498458a9f65c79f0645644426eff3449

.exe 196KB

6afaa0669c83f877de786ba2e8f80556498458a9f65c79f0645644426eff3449

IMPHASH 559ea2d92c5991a634b8d2ac3b9a7cef
SHA256 6afaa0669c83f877de786ba2e8f80556498458a9f65c79f0645644426eff3449
MD5 a0b41fe9122e25ce489d16bd93a58850
SHA1 7adb850f9d258fd0161e991fdf3396047250bb95
SHA512 6297ee58455261064409dd78be3a0d0fbfc7a5e99cb08cb74713dd4397cf9bbcc6517981ee4d749cd1f0991c489f7b32868ff31b58386c37ed51da4ccc42da8b
SSDEEP 3072:aM65zTN7RH9AvfrF3fpp0dL5qxpubZyejITv9fXFg1:1mTNJ0frF3Bp0dLiobP+v9fVa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

156767

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathFileExistsA PathQuoteSpacesA PathUnquoteSpacesA PathAppendA PathRemoveArgsA StrRChrA

kernel32

SetEvent GetTickCount IsBadReadPtr ExpandEnvironmentStringsA GetWindowsDirectoryA WriteFile InitializeCriticalSection OpenProcess FindResourceExA WideCharToMultiByte GetVolumeInformationA Sleep SizeofResource CreateEventA LeaveCriticalSection GetFileAttributesA GetExitCodeProcess CreateProcessA TerminateProcess IsDBCSLeadByte ReadFile GetSystemDirectoryA GetEnvironmentVariableA MultiByteToWideChar lstrlenW RaiseException GetShortPathNameA FindFirstFileA GetLastError lstrcmpiA GetProcAddress EnterCriticalSection GetTempFileNameA FindClose LoadLibraryA GetProcessId CreateFileMappingA GetExitCodeThread WaitForSingleObject CreateEventW GetModuleFileNameA FindNextFileA GetModuleHandleA LoadLibraryExA VirtualProtect OpenEventW DeleteCriticalSection GetCurrentThreadId DuplicateHandle GetVersionExA CloseHandle GetTempPathA GetSystemTime DeleteFileA lstrcpyA WriteConsoleA SetStdHandle GetConsoleMode GetConsoleCP GetCurrentProcess InterlockedDecrement InterlockedIncrement LoadResource FreeLibrary lstrcpynA MapViewOfFile lstrlenA lstrcmpA GetProcessHeap FindResourceA GetFileSize CreateFileA GetComputerNameA ExitProcess GetConsoleOutputCP WriteConsoleW FlushFileBuffers SetFilePointer GetLocaleInfoA RtlUnwind InitializeCriticalSectionAndSpinCount GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetFileType LockResource HeapFree HeapAlloc VirtualAlloc GetModuleHandleW GetSystemInfo VirtualQuery GetCommandLineA GetStartupInfoA HeapCreate HeapDestroy VirtualFree HeapReAlloc GetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError LCMapStringA LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStringTypeA GetStringTypeW HeapSize FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount

user32

PostMessageA GetMessageA CharNextA DefWindowProcA

advapi32

StartServiceA CloseServiceHandle RegCloseKey GetUserNameA QueryServiceConfigA OpenSCManagerA QueryServiceStatusEx RegDeleteValueA RegQueryInfoKeyA RegOpenKeyExA RegCreateKeyExA RegEnumKeyExA RegDeleteKeyA EnumServicesStatusExA CreateServiceA RegSetValueExA GetTokenInformation OpenProcessToken OpenServiceA

shell32

ShellExecuteA SHGetSpecialFolderPathA ShellExecuteExA

ole32

CoTaskMemAlloc CoTaskMemFree CoCreateGuid CoCreateInstance CoTaskMemRealloc StringFromGUID2 CoInitialize

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx